CLAIMS 



1. (currently amended) A method for processing network management data in a 
network management system that generates Simple Network Management Protocol (SNMP) 
events, for presentation in an event log display to a user, when SNMP event conditions are 
detected during the monitoring of a network, the method comprising: 

receiving network management data relating to an SNMP event condition; 

adding a normal event log entry to the event log display, the normal event log entry 
corresponding to the event, when the number of preceding equivalent events is less than a 
predetermined number in a preceding time period; 

add i ng a r e curr i ng e v e nt l og e ntry to th e e v e nt l og d i sp l ay, th e r e curr i ng e v e nt l og 
e ntry corr e spond i ng to th e e v e nt, wh e n ( i ) th e e v e nt do e s not a l r e ady hav e r e curr i ng e v e nt 
status and ( ii ) th e numb e r of pr e c e d i ng e qu i va le nt e v e nts i s gr e at e r than th e pr e d e t e rm i n e d 
numb e r i n th e pr e c e d i ng t i m e p e r i od; and 

responsive to determining an event corresponds to an already recurring event, 
updating at least one existing log event entry by marking the at least existing one log event 
entry as recurring; and 

maintaining the event log display by excluding an indication of the event from the 
event log display when (i) the event corresponds to an already recurring event and (ii) the 
number of preceding equivalent events is greater than the predetermined number in the 
preceding time period, wherein excluding an indication of the event from the event log display 
comprises excluding an indication of a normal event log entry to the event log display., 
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wherein the normal event log entry is a log entry indicating the event does not correspond to 



the already recurring event . 
2-3. (cancelled) 

4. (previously presented) A method as claimed in claim 1 further comprising 
adding a time stamp to the event data of the recurring event, the time stamp indicating the 
time of the subsequent occurrence of the event condition. 

5. (original) A method as claimed in claim 1, wherein the preceding time period is 
an immediately preceding predetermined time period. 

6-7. (cancelled) 

8. (currently amended) A method for processing a network management data in a 
network management system that generates Simple Network Management Protocol (SNMP) 
events, for presentation in an event log display to a user, when SNMP event conditions are 
detected during the monitoring of a network, the method comprising: 

receiving network management data relating to an SNMP event condition; 

determining whether the monitored characteristic for the SNMP event condition is in a 
recurring state; 
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responsive to determining that the monitored characteristic is in a recurring state, 
determining whether the event condition has occurred more than a first predetermined 
number of times in a first preceding time period; and 

responsive to determining that the event condition has occurred more than the first 
predetermined number of times in the first preceding time period, (a) updating at least one 
existing log event entry by marking the at least one existing log event entry as recurring and 
(b) preventing the received data relating to the event condition from being presented in the 
event log display to the user. 



9-11. (cancelled) 



12. (previously presented) A method as claimed in claim 8, further comprising adding to 
event data of the event in the recurring state the time of the received data relating to the 
event condition. 



13. (previously presented) A method as claimed in claim 8, the method further comprising 
generating an event for presentation in the event list log display to the user when it is 
determined that the event condition has not occurred more than the first predetermined 
number of times in the first immediately preceding time period. 



14. (original) A method as claimed in claim 13, wherein the generated event is not a 
recurring event. 
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15. (original) A method as claimed in claim 8, wherein it is determined that the monitored 
characteristic for the event condition is not in a recurring state, the method further 
comprises determining whether a second predetermined number of equivalent events have 
been generated in a second preceding time period. 



16. (previously presented) A method as claimed in claim 15, the method further 

comprising generating a recurring event when it is determined that the second 

predetermined number of equivalent events have been generated in the second preceding 
time period. 



17. (previously presented) A method as claimed in claim 16, after the step of generating 
a recurring event, the method further comprises receiving data relating to a subsequent 
occurrence of the event condition, and preventing a subsequent event from being presented 
in the event log display to the user. 



18. (original) A method as claimed in claim 17, further comprising, after the step of 
receiving data relating to a subsequent occurrence of the event condition, adding a time 
stamp to the event data of the recurring event, the time stamp indicating the time of the 
subsequent occurrence of the event condition. 



19. (previously presented) A method as claimed in claim 15, the method further 
comprising generating an event for presentation in the event list log display to the user when 
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it is determined that the second predetermined number of equivalent events have not been 
generated in the second preceding time period. 



20. (previously presented) A method as claimed in claim 15, wherein the first or second 
preceding time period is an immediately preceding predetermined time period. 

21. (previously presented) A computer readable medium including a computer program 
for carrying out the steps of: 

receiving network management data relating to an SNMP event condition; 

adding a normal event log entry to the event log display, the normal event log entry 
corresponding to the event, when the number of preceding equivalent events is less than a 
predetermined number in a preceding time period; 

add i ng a r e curr i ng e v e nt l og e ntry to th e e v e nt l og d i sp l ay, th e r e curr i ng e v e nt l og 
e ntry corr e spond i ng to th e e v e nt, wh e n ( i ) th e e v e nt do e s not a l r e ady hav e r e curr i ng e v e nt 
status and ( ii ) th e numb e r of pr e c e d i ng e qu i va le nt e v e nts i s gr e at e r than a pr e d e t e rm i n e d 
numb e r i n th e pr e c e d i ng t i m e p e r i od; and 

responsive to determining an event corresponds to an already recurring event, 
updating at least one existing log event entry by marking the at least one existing log event 
entry as recurring; and 

maintaining the event log display by excluding an indication of the event from the 
event log display when (i) the event corresponds to an already recurring event and (ii) the 
number of preceding equivalent events is greater than a predetermined number in the 
preceding time period, wherein excluding an indication of the event from the event log display 
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comprises excluding an indication of a normal event log entry to the event log display,. 
wherein the normal event log entry is a log entry indicating the event does not correspond to 
the already recurring event . 

22. (cancelled) 

23. (previously presented) A network management apparatus for monitoring a network 
and for processing network management data and generating Simple Network Management 
Protocol (SNMP) events, for presentation in an event log display to a user, when SNMP event 
conditions are detected, the apparatus comprising a processor for receiving network 
management data relating to an SNMP event condition, and for determining whether a 
predetermined number of equivalent SNMP events have been generated in a preceding time 
period, designating the event as being in a recurring state when the predetermined number 
of equivalent SNMP events have been generated in the preceding time period, responsive to 
determining an event corresponds to an already recurring event, updating at least one 
existing log event entry by marking the at least one existing log event entry as recurring, and 
ignoring subsequent event conditions associated with recurring events as long as the event 
condition remains in a verified recurring state. 

24. (cancelled) 
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